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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Canceled) 

2. (Currently Amended) A method according to Claim 1, i n wh i ch 21, 
wherein the predefined number (L|) is variable from one predefined block of 
instructions (H i, . . . , IIn ) to another. 

3. (Currently Amended) A method according to on e of C l a i ms 1 to 2, i n 
wh i ch claim 21, wherein the common block (r(k,s)) set of instructions comprises at 
least one calculation instruction (yk) that is equivalen t, v i s a v i s a covert channe l 
attack, to a calculation instruction of each predefined block (Hi , . . . , n N ) in the context 
of a covert channel attack . 

4. (Currently Amended) A method according to Claim 3, in which the 
common block (r(k,s)) set of instructions also comprises an instruction to update a 
loop pointer (k) indicating a number of executions already e x e cut e d of performed 
with the common ele m e ntary b l ock (r(k,s)) set of instructions . 
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5. (Currently Amended) A method according to Claim 3 or Claim 4 , in 
which wherein the common block (r(k,s)) set of instructions also comprises an 
instruction to update a state pointer {s) indicating whether the predefined number (t}0 
has been reached. 

6. (Currently Amended) A method according to Claim 4 or C l aim 5, i n 
which wherein the value of the loop pointer (k) and/or the valu e of th e stat e po i nt e r 
(s) ar e is a function of the value of the input variable and/or of the number of 
instructions of ]n the selected block of instructions (P j) assoc i atod with th e input data 
value. 

7. (Currently Amended) A method according to on e of C l aims 1 to 6, i n 
which claim 21. wherein , in order to successively effect several blocks of instructions 
chosen from amongst the N plural predefined blocks of instructions (H i, . . . , EL m), 
each chos e n selected block of instructions (n,) being is selected as a function of an 
input variable (D*) associated with an input index (i), and 

the common ele m e ntary b l ock (r(k,s)) set of instructions is executed a total 
number of times , th e total numb e r (LT) b e ing equal to a sum of the predefined 
numbers (tj) associated with each chos e n selected block of instructions {Hj). 

8. (Currently Amended) A method according to Claim 7 , dur i ng wh i ch 
wherein one and the same block of instructions may b e choson is selected several 
times according to the input variable associated with the input index (i). 
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9. (Currently Amended) A method according to on e of C l aims 7 or 8, i n 
which claim 7, wherein at least two of the following data items, (a) the value of the a 
loop pointer (k) and/or , (b) the value of the a state pointer (s) and/or , (c) the value of 
the input variable (DO and/or . and (d) the number of instructions of the selected 
block of instructions,, (n,) assoc i at e d w i th th e valu e of th e i nput data i t e m (D O are 
linked by one or more mathematical functions. 

10. (Currently Amended) A method according to Claim 9, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Dj) of D corresponding to an input variable of 
input index i, th e m e thod comprising the following steps: 

Initialisation: 

R 0 <- 1 ; Ri <- A; i <- M-1 
As long as i > 0, repeat the common block (r(k, s)) set of instructions : 

k<- (/s)x(k+1) + sx2x(/Dj) 

s <- (k mod 2) + (k div 2) 

y(k,s): R 0 <- RoxRk mod 2 

i <- i - s 

Return Rgr R^ 

where Rn and R i are values stored in two registers, respectively, 

k is a loop pointer indicating a number of executions performed with the 

common set of instructions, and 

s is a state pointer indicating whether the predefined number has been 

reached. 
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1 1 . (Currently Amended) A method according to Claim 9, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Dj) of D corresponding to an input variable of 
input index i, th e m e thod comprising the following steps: 

Initialisation: 

Ro <-1;Ri <- A;i<- M-1;k<-1 
As long as i > 0, repeat the common b l ock (r(k, s)) set of instructions : 

k <- (Di) AND (/k) 

Y'(s,k): R 0 <- R 0 xR k 

i <- i - (Ik) 

Return Rqt R&. 

where Rg and R 1 are values stored in two registers, respectively. 

k is a loop pointer indicating a number of executions performed with the 
common set of instructions, and 

s is a state pointer indicating whether the predefined number has been 
reached. 

12. (Currently Amended) A method according to Claim 9, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Dj) of D corresponding to an input variable of 
input index i, th e m e thod comprising the following steps: 

Initialisation: 

R 0 <- 1 ; Ri <- A; i <- 0; k <- 1 
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As long as i < M-1 , repeat the blook (r(k t s)) common set of instructions : 

k <- k 0 Dj 

y(k): R k <- RkxRi 
i <- i+k 
Return Rox 

where Rn and R i are values stored in two registers, respectively, and 
k is a loop pointer indicating a number of executions performed with the 
common set of instructions. 

13. (Currently Amended) A method according to Claim 9, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Dj) of D corresponding to an input variable of 
input index i, the m e thod comprising the following steps: 
Initialisation: 

Ro<- 1; Ri <- A,; R 2 <- A 3 ; 
D.i <- 0; i <- M-1; s <- 1 
As long as i > 0, repeat the b l ook (r(k, s)) common set of instructions : 
k <- (/s)x(k+1) + sx(Dj + 2x(D| AND D M )) 
s <- /((k mod 2) 0 (k div 4)) 
y(k,s): R 0 <- R 0 xR SX (k div 2) 

i <- i - sx(k mod 2 + 1 ) 

Return Rgt R^ 

where Rn and R i are values stored in two registers, respectively. 
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k is a loop pointer indicating a number of executions performed with the 
common set of instructions, and 

s is a state pointer indicating whether the predefined number has been 
reached. 

14. (Currently Amended) A method according to Claim 9, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Dj) of D corresponding to an input variable of 
input index i, the method comprising the following steps: 
Initialisation: 

Ro <- 1 ; Ri <- A; R 2 <- A 3 ; 
D-i <- 0; i <- M-1; s <- 1 
As long as i > 0, repeat: 
k<-(/s)x(k+1) 

s <- s 0 Dj © ((D M AND (k mod 2)) 

Ro <- RoxRkxs 
i <- i - kxs - (/Dj) 

Return Rqt R^ 

where R n and R i are values stored in two registers, respectively. 

k is a loop pointer indicating a number of executions performed with the 
common set of instructions, and 

s is a state pointer indicating whether the predefined number has been 
reached. 
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15. (Currently Amended) A method according to on e of C la ims 7 or 8, i n 
which the l i nks botwoon claim 7. wherein at least two of the following data items, (a) 
the value of the a loop pointer (k) and/or , (b) the value of the a state pointer (s) 
and/or , (c) the value of the input variable (D i ) and/or , and (d) the number of 
instructions of the selected block of instructions, (n } ) associat e d w i th the va l u e of tho 
i nput data it e m (D j) are linked and such linking is defined by a table with several 
inputs such a s a matr i x (U(k,1)) . 

16. (Currently Amended) A method according to Claim 15, used in the 
implementation of an exponentiation calculation of the type B = A D , with D being an 
integer number of M bits, and each bit (Di) of D corresponding to an input variable of 
input index i, th e m e thod comprising the following step: 

As long as i > 0, repeat the b l ock (r(k, s)) common set of instructions : 
k<- (/s)x(k+1) + sx2x(/Dj) 
s<- U(k,1) 

y(k,s): R 0 <- R 0 xRu<k,o) 

i <- i - s 

where (U(k,1)) is the following matrix: 



(U(k,1)) 0 * k - 2 = 



'o 0^ 



o 1 , 

V J 



Ro and R i are values stored in two registers, respectively, 
k is a loop pointer indicating a number of executions performed with the 
common set of instructions, and 
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s is a state pointer indicating whether the predefined number has been 
reached. 



17. (Currently Amended) A method according to Claim 15, used in the 
implementation of an exponentiation calculation of the type B = A D according to the 
algorithm (M, M 3 ), with D being an integer number of M bits, and each bit (Dj) of D 
corresponding to an input variable of input index i, th e m e thod comprising the 
following step: 

As long as i > 0, repeat the common b l ock (r(k f s)) set of instructions : 
k <- (/s)x(k+1) + sx(Dj + 2x(/Di AND D M )) 
s <- U(k,2) 

y(k,s): R 0 <- R 0 xRu(k,o); 

i<-i-U(k,1) 
where (U(k,1)) is the following matrix: 



(U(k,1)) 



0 <, k £ 5 
0 <, 1 <> 2 



'0lP 
0 0 0 

1 1 1 

0 0 0 
0 0 0 
2 2 1 



Rn and R i ^ are values stored in two registers, respectively, 

k is a loop pointer indicating a number of executions performed with the 

common set of instructions, and 

s is a state pointer indicating whether the predefined number has been 

reached. 
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18. (Currently Amended) A method according to Claim 15, used in the 
implementation of a calculation on an elliptic curve in affine coordinates, a 
calculation using operations of the addition or doubling of points type, and in which 
the following step is performed: 

As long as i > 0, repeat r(k,s) : 

Y(k): Ru(k,o) <- Ri + Rs; 

Ru(k,1) <- Ru(k,1) + Ru(k t 2>; 

R5 <- R2/R1; Ru(k,3) <- R1 + R5; 

Ru(k,4) <- R5 2 ; 
Ru(k,4) K - Ru(k,4) + a; 
Ri <- R1 + Ru(k,5)l 

R2 <- Ri + Ru(k,6); R6 <- Ri + Ru(k,7>; 

R5 <_ R5 ■ Rei R2 <_ R2 + R5 
s <- k - Dj + 1 
k<- (k+1)x(/s); 
i <- i - s; 

where (U(k,1)) is the following matrix: 



o,^.=f , 2 4 1 6 6 4 3 l 

> ^6 6 3 5 1 5 2 6 j 



(U(k,1)) 0 < 1 £ 10 ^oo^idzo, |^ jj ^ 

Ro and R i are values stored in two registers, respectively, 
k is a loop pointer indicating a number of executions performed with the 
common set of instructions, and 
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s is a state pointer indicating whether the predefined number has been 
reached. 

19. (Currently Amended) A method for obtaining an elementary block 
(r(k,s)) set of instructions common to N a plurality of predefined blocks of 
instructions (H i, n^ ), a m e thod ab l e to b e us e d for implementing a cryptographic 
calculation method according to on e of C l aims 1 to 12, th e m e thod b e ing 
charact e ris e d i n that i t compr i s e s claim 21, comprising the following steps: 

E1: breaking down each predefined block of instructions (Hi , FIm ) into a 
series of elementary blocks (y) that are equivalent v i s a v i s in the context of a covert 
channel attack, and classifying all the elementary blocks, 

E2: s ee king identifying a common elementary block (y(k,s)) that is equivalent 
to all the elementary blocks fr) of all the predefined blocks of instructions, 

E3: s ee k i ng identifying a common block (r(k,s)) comprising at least the 
common elementary block (y(k,s)) previously obtain e d identified and an instruction to 
update a loop pointer (k) such that an execution of the common elementary block 
associated with the value of the loop pointer (k) and an execution of the elementary 
block with a rank equal to the value of the loop pointer (k) are identical. 

20. (Currently Amended) A method according to Claim 19, charact e r i s e d 
i n that wherein , during step E1 , at least one fictional instruction is added to at least 
one predefined block of instructions. 
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21 . (New) A method for implementing a cryptographic calculation in an 
electronic device, comprising the following steps: 

selecting a block of instructions from amongst a plurality of predefined blocks 
of instructions, as a function of an input variable; and 

executing a set of instructions that is common to the plurality of predefined 
blocks of instructions a predefined number of times, wherein said predefined number 
is associated with the selected block of instructions. 

22. (New) A method according to claim 5, wherein the value of the state 
pointer is a function of the value of the input variable and/or of the number of 
instructions in the selected block of instructions. 

23. (New) A method according to claim 15, wherein said several inputs 
comprise a matrix. 

24. (New) A method according to claim 21, wherein said electronic device 
is a chip card. 
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